Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a353830303a3a2f34382d3438203d3e20323136323635.roa
File: 326131333a646638303a353830303a3a2f34382d3438203d3e20323136323635.roa (raw, json)
Hash identifier: DTo9DzcybpL8vfE7vfx/7WrelVh7gHZ/7qXr5y2XqA8=
Subject key identifier: A6:5E:AA:FA:F0:3D:0A:34:A6:C0:63:86:05:A7:D7:26:A1:2A:7E:DB
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 4493CA09BF90C8766669CFAFBBB6307B94AB062F
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a353830303a3a2f34382d3438203d3e20323136323635.roa
Signing time: Sat 30 Sep 2023 22:03:45 +0000
ROA not before: Sat 30 Sep 2023 21:58:45 +0000
ROA not after: Sat 28 Sep 2024 22:03:45 +0000
asID: 216265
IP address blocks: 2a13:df80:5800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:93:ca:09:bf:90:c8:76:66:69:cf:af:bb:b6:30:7b:94:ab:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 30 21:58:45 2023 GMT
Not After : Sep 28 22:03:45 2024 GMT
Subject: CN=A65EAAFAF03D0A34A6C0638605A7D726A12A7EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:22:ab:77:ee:3b:25:4a:25:ba:04:68:48:
40:d5:97:8a:84:62:5d:8f:aa:6a:60:a3:40:64:fe:
6a:45:03:38:a9:03:ac:6b:2a:a7:13:23:a6:e4:5c:
5b:39:51:c0:53:96:92:68:04:7e:fc:df:e7:2e:4e:
b1:d3:4c:49:48:df:ea:36:71:3b:79:d9:ec:ed:42:
26:84:e1:f5:6f:0a:04:79:b2:a5:43:84:d5:66:90:
29:d8:2f:7c:35:3a:93:81:5f:42:94:bb:da:a8:79:
43:4a:db:be:b1:e2:15:09:72:1a:a5:2d:f8:35:2b:
5c:b7:a2:44:d2:92:a6:2b:4d:74:94:ab:59:e8:fb:
29:28:a1:88:ce:2c:49:0a:04:38:f1:98:b7:45:cd:
58:3a:0f:10:32:69:a4:ad:18:6b:0a:c6:48:da:7a:
1a:11:29:79:46:ba:42:9d:62:06:1e:1a:e1:c1:7c:
74:63:fe:38:78:7a:44:32:33:04:a2:65:80:d8:d8:
43:f0:27:75:23:d2:f2:63:ee:6c:df:5d:fd:c3:04:
3d:78:12:53:82:2b:1a:55:f3:18:6c:fe:2f:4b:9e:
dc:06:f3:57:33:40:56:89:05:fb:67:c0:80:63:66:
83:5d:3c:35:18:13:49:c7:d9:1c:32:f7:f1:f0:ee:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5E:AA:FA:F0:3D:0A:34:A6:C0:63:86:05:A7:D7:26:A1:2A:7E:DB
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a353830303a3a2f34382d3438203d3e20323136323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:5800::/48
Signature Algorithm: sha256WithRSAEncryption
c7:1a:23:a3:7f:9f:67:6b:3e:38:90:0b:72:0d:17:4f:3a:19:
b6:03:c6:ac:cc:64:9e:ab:28:41:3c:41:0b:2a:24:5d:6d:67:
cf:07:48:11:16:6c:80:66:83:52:58:3d:02:6c:d6:11:51:f5:
3c:7d:5a:ab:c7:8f:b9:d7:96:b6:52:58:44:25:70:a3:c7:ed:
94:ea:73:c6:07:23:c0:63:d6:68:29:3a:4f:54:4f:d2:2b:46:
1a:8a:ff:9f:5a:83:de:00:02:4e:df:a3:75:40:79:ad:ac:80:
25:2c:97:1a:16:2e:8c:6f:fe:11:18:7e:6f:ce:c1:fb:2a:c8:
a4:41:de:db:a9:23:2e:a0:1d:e3:3a:2c:ec:86:32:fd:95:89:
ad:95:2b:76:5d:d5:cb:a9:1e:61:f4:4f:ae:81:59:91:f4:2b:
68:86:4c:0a:45:c0:0e:38:2d:54:4e:29:67:26:de:98:a8:0a:
ac:be:fa:d7:71:17:63:e8:8e:c4:dc:5c:72:50:19:55:7b:90:
1a:29:24:8b:4c:d9:09:b3:83:13:f3:61:05:b2:a3:d8:9d:8c:
8a:a2:4d:9d:27:ce:51:a7:aa:05:56:19:e0:9f:dd:a9:1c:cf:
79:15:36:af:a0:aa:1a:1b:3f:19:da:3d:41:40:3e:20:4f:f6:
60:de:79:b8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIURJPKCb+QyHZmac+vu7Ywe5SrBi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MzAyMTU4NDVaFw0yNDA5MjgyMjAzNDVaMDMxMTAvBgNV
BAMTKEE2NUVBQUZBRjAzRDBBMzRBNkMwNjM4NjA1QTdENzI2QTEyQTdFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPyKrd+47JUolugRoSEDVl4qE
Yl2Pqmpgo0Bk/mpFAzipA6xrKqcTI6bkXFs5UcBTlpJoBH783+cuTrHTTElI3+o2
cTt52eztQiaE4fVvCgR5sqVDhNVmkCnYL3w1OpOBX0KUu9qoeUNK276x4hUJchql
Lfg1K1y3okTSkqYrTXSUq1no+ykooYjOLEkKBDjxmLdFzVg6DxAyaaStGGsKxkja
ehoRKXlGukKdYgYeGuHBfHRj/jh4ekQyMwSiZYDY2EPwJ3Uj0vJj7mzfXf3DBD14
ElOCKxpV8xhs/i9LntwG81czQFaJBftnwIBjZoNdPDUYE0nH2Rwy9/Hw7s39AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUpl6q+vA9CjSmwGOGBafXJqEqftswHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzNTM4MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMyMzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT34BYADANBgkqhkiG9w0BAQsFAAOCAQEAxxojo3+fZ2s+OJAL
cg0XTzoZtgPGrMxknqsoQTxBCyokXW1nzwdIERZsgGaDUlg9AmzWEVH1PH1aq8eP
udeWtlJYRCVwo8ftlOpzxgcjwGPWaCk6T1RP0itGGor/n1qD3gACTt+jdUB5rayA
JSyXGhYujG/+ERh+b87B+yrIpEHe26kjLqAd4zos7IYy/ZWJrZUrdl3Vy6keYfRP
roFZkfQraIZMCkXADjgtVE4pZybemKgKrL7613EXY+iOxNxcclAZVXuQGikki0zZ
CbODE/NhBbKj2J2MiqJNnSfOUaeqBVYZ4J/dqRzPeRU2r6CqGhs/Gdo9QUA+IE/2
YN55uA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:21 2025 by rpki-client